On Mon, 2009-06-01 at 09:28 -0700, Rich Shepard wrote: > I'm running SA-3.2.5 on Slackware-12.2 and encountering false positives on > messages that have not before been seen as spam by SA. Specifically, the > daily postfix mail log summary report and the daily logwatch report are > marked at spam; they are sent by root to me as a user. Because > /etc/procmailrc threw these messages away it took a long time to figure out > that it was SA mis-labeling these messages that was the immediate problem. > > Over the past few months I've also had problems with messages from three > specific domains that were never delivered to my inbox. However, when a > procmail recipe directed all messages to me at my business domain to a > different mail file, they were delivered. > > How can I determine what causes SA to mark the log summary reports as > spam?
run the message though spamassassin -D and see what tests fire. Most likely it will be that some of the domains that are reported in your summary are listed in URIBL, SURBL, or some other uri block list. -- Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX www.austinenergy.com
signature.asc
Description: This is a digitally signed message part
